[Git][security-tracker-team/security-tracker][master] update status for CVE-2026-97394

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
641208ee by Moritz Muehlenhoff at 2026-10-16T15:14:42+02:00
update status for CVE-2026-97394

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -529,7 +529,9 @@ CVE-2026-97666 (Sonatype Nexus Repository 3 allows an unauthenticated remote att
 CVE-2026-97665 (A missing authorization check in Nexus Repository 3's NuGet Components ...)
 	NOT-FOR-US: Sonatype
 CVE-2026-97394 (kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 u ...)
-	NOT-FOR-US: kin-openapi
+	- golang-github-getkin-kin-openapi <not-affected> (Only affects 0.136 and later)
+	NOTE: https://github.com/getkin/kin-openapi/security/advisories/GHSA-p6wj-qrr4-pgh5
+	NOTE: https://github.com/getkin/kin-openapi/commit/30e292371a89ca6d1f91a9553e0aa518b49f838d (v0.143.0)
 CVE-2026-97370 (Junrar is an open source Java RAR archive library. Prior to 7.6.1, Rar ...)
 	NOT-FOR-US: Junrar
 CVE-2026-96614 ("\u30b2\u30aa\u30a2\u30d7\u30ea" provided by GEO CORPORATION is vulner ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/641208ee7c22ff1127c5907fdeaa7b494e452a61

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/641208ee7c22ff1127c5907fdeaa7b494e452a61
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261016/89681754/attachment-0001.htm>